CVE-2024-26673: Debian Linux

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since destination port is a mandatory attribute for this object.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: from 5.3, before 5.4.269 (fixed in 5.4.269); from 5.5, before 5.10.210 (fixed in 5.10.210); from 5.11, before 5.15.149 (fixed in 5.15.149); from 5.16, before 6.1.77 (fixed in 6.1.77); from 6.2, before 6.6.16 (fixed in 6.6.16); from 6.7, before 6.7.4 (fixed in 6.7.4); …

Published 2024-04-02. Last modified 2026-06-17.